103

Update: As of January 2014, you can now change security groups for running AWS EC2 instances. AWS Console Simply right-click on an instance, and click on Change Security Group Add/remove security groups as appropriate and click Assign Security Groups when done EC2 Command Line Use the following command: ec2-modify-instance-attribute <instance-id>...


22

Update AWS has enabled this feature in the EC2 API. It is available as the --virtualization-type option to aws ec2 register-image in the new Boto based awscli. Original answer Yes! Unfortunately, there is not a direct way to do so. Also, some PV instances may need kernel and bootloader modifications. Create a volume from your existing PV AMI. If it was ...


14

The specifics depend on which exact virtualization solution you use, but the idea is that you have a virtual farm, where there are a number of physical hosts with several virtual machines each. You then use some of the efficiency you gained by not needing a physical host for every VM so that you have enough overhead left to cover in the case where a physical ...


13

In my case, I had to do the conversion manually since the instance that I create using aws ec2 register-image did not boot. My solution is based on this post on the AWS EC2 Forum. Preparation Make sure that all the volumes are in the same availability zone. SSH to your PV machine that you want to migrate from and apply all updates, then log out. Go to ...


13

The only possible reason I can think of is that they want to force you to regenerate new keys. As these keys were generated before you had access they may not be trusted. Removing them and restarting sshd will regenerate the keys for you. However the document doesn't really make that clear. This is pure speculation and it would be better to contact them ...


13

All virtual servers running on a physical host will go offline if the host has any sort of failure. That said, most platforms offer a high-availability solution for a single VM. Other times a system is built with multiple nodes to prevent service disruption in the event that one node goes down. If two VM nodes make up a highly available service, it is ...


12

The critical detail is that the page you've referenced is about creating a new Compute Engine machine image. Specifically, when you create a new virtual machine image, you want to ensure it does NOT include any host keys. That way, when the image is cloned and reconstituted into an actual VM, the sshd startup script will recognize that there are no host ...


12

From what I understand of the vulnerabilities, no - the speculative caching attacks bypass all of the CPU's protections against a process grabbing memory from whatever arbitrary address. I believe this would include the neighbor VMs (even those patched to protect against the attack themselves) as well as the hypervisor's kernel memory space - but even if ...


10

TLDR: ec2-register -a x86_64 -d '3.15.7-200.fc20.x86_64' -n 'Fedora_20_HVM_AMI' --sriov simple --virtualization-type hvm -s snap-b44feb18 --root-device-name /dev/sda1 Detailed steps: Answering further based upon Jeff Strunk's response to simplify the steps and giving a bit more details on the ec2 register image: Create Instance using PV Image. Make / ...


10

This answer shows two methods of solving this problem. The first method is to create a startup-script that disables UFW. The second method attaches the boot disk to another instance and modifies the file  /etc/ufw/ufw.conf Method 1: Step 1: Login into the Google Cloud Console. Go to Compute Engine -> VM instances. Click on your instance. Click on the ...


9

I'm compiling an answer based on the comments on the post, thanks to @Tim and @Michael Hampton From Petrutandrei's blog- The ELB is designed to handle large loads of traffic (20kb/sec) without a problem when this traffic increases gradually over a long period of time (several hours). However, when you expect a high increase in traffic over a short ...


8

It is now possible to do this. Click on the actions menu and Change Security Groups - Select the Security Groups you would like to use.


7

There is a feature in AWS that lets you Create an Alarm for high bandwidth in or out. This dialog is in Services / EC2 / Instances. From that page, where you see a list of your instances, there is a column Alarm Status, looking like this: I set it for listening for network in over 1 MB in 5 mins. I really don't know what to expect, so I'll probably have ...


7

The default username for the CentOS 7 cloud image is centos. There is no password; instead you log in with the ssh key you provided at instance creation. You can then sudo and do whatever you like.


6

Conceptually, the process is simple: start copying all the RAM for a VM from one physical host to another over the network, keeping track of which memory sections you've already copied have been updated after you copied them. Repeat the cycle for the changed RAM until the change set is small, pause the VM, copy the last bits of RAM (and the CPU register ...


6

Nutanix is proprietary Software-Defined Storage stack (NDFS, Nutanix Distrubuted File System) which is nothing but NFS/SMB3 gateway built on top of Java-written Cassandra DB, + open-source derived Prism UI for management, + performance and backup-specific (CBT-bases snapshots for integration with Veeam backup etc). In a nutshell: nothing unique :)


5

You are right with your assumption that if the physical machine fails also the VMs get unavailable. But openstack can take care of that and start the VMs of the failed physical server on a other server or you can use a hypervisor system which is already distributed, I think vsphere can do that. You should read the openstack documentation on HA for more ...


5

If you want redundancy you still need to plan for it. Cloud providers (regardless of the platform) still have outages on both the host and datacenter levels. Usually there is a pool of hosts and you don't have much say over what VM goes where. If a host dies you have a small outage while the VM is moved and reboots. Many providers let you setup anti-...


4

If you downladed the GenericCloud image from cloud.centos.org, it does not have any users created. You can change the root password using virt-customize from libguestfs-tools package: # virt-customize -a image_name.qcow2 --root-password password:your.great.password Just keep in mid that this is not secure. After you login as root, you should create a sudo ...


4

Since you need to get virtualization for free, VMware vSphere Hypervisor is not an option. That being said, VMware vSphere Free edition would not provide any beneficial features like erasure coding, clustering, HA and FT, DFS or VSAN due to license restrictions. I would suggest you look at Windows Server Hyper-V Free 2016. It does not have GUI, however, ...


4

You can run either the Azure CLI or the newer AZ PowerShell core cmdlets on a Linux VM, both are cross platform and would allow you to do this. CLI: az vm deallocate -g MyResourceGroup -n MyVm AZ Powershell: Stop-AzVM -name myvm -resourcegroup MyResourceGroup


3

Turns out I needed to set the service to ecs.amazonaws.com and not ec2.amazonaws.com in my aws_iam_role. I'd tried this before, but didn't specify sufficient in the aws_iam_role_policy . It's very much like this issue on the AWS forums. resource "aws_iam_role" "beatthemarket" { name = "beatthemarket" assume_role_policy = <<EOF { "Version": "...


3

They basically mean the exactly same thing, but the difference is in the angle of view: subscription (or oversubscription) is a term that defines the situation looking through the lenses of clients (whatever or whoever they are) in the relation to the system/service they are trying to use. E.g. as @Ron Maupin described in a comment to the question, if you ...


3

Without knowing more about your exact script you probably want something that can run lambda functions: AWS Lambda Azure Functions Google Cloud Functions No VMs to worry about, pay per-second-per-gig, and once you're done. No infrastructure to remember to tear down. It will just run your script in its own environment and tear it down when it's done. Might ...


3

No, commodity hypervisors commonly used for enterprise cannot span a virtual machine across multiple physical hosts. More difficult to do, and outside their typical use cases of consolidation of "small" workloads on large hosts. Scaling out is where many small instances are started across multiple hosts. Requires applications that can be ...


2

You can do this from inside of the AWS web interface. Navigate to snapshots, click the desired snapshot you wish to convert to hvm and click on actions and then create image. In the dropdown in the create image wizard select HVM.


2

Wow, this is a problem where the jargon is still being created. "Cloud Portfolio Management" and "Multi-Cloud Management" seem pretty popular as product categories. And "Single pane of glass" seems a meme. Googling around I found ostrato, ecmanaged and rightscale. A lot of these seem to be for enterprises who have both private and public cloud assets. I ...


2

There are several projects that aim to provide the functionality you ask for, you'll need to actually test them to check to what extent they fulfill your expectations. I don't know of an established standard, but the libcloud project seems to be near to that. It is based in python, and basically it works providing an abstraction layer to interact with the ...


2

I'm not exactly sure this can meet your needs, but look at coreos and docker. CoreOS can manage systemd tasks in a cluster (and systemd tasks in coreos basically are wrappers for docker containers). Each container can be run on machine with specific metadata which gives you ability to build pretty complex solutions.


2

Nope. As a true-in-almost-all-cases generalization <*>, a given process can only run on a single piece of hardware. So, if you have a LAMP app that isn't built to scale out onto multiple nodes, something like Mesos will only buy some level of failover/HA. It won't somehow bundle the memory/CPU in two machines together. If your app is built for scale-out, ...


Only top voted, non community-wiki answers of a minimum length are eligible